Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/V4CbGWiY48UAQUA_FKJdmKPe6aQ.roa
File: V4CbGWiY48UAQUA_FKJdmKPe6aQ.roa (raw, json)
Hash identifier: CVn1M5zFeR98952DRwS89jPVdmWOanyakfyhjETu8iU=
Subject key identifier: 57:80:9B:19:68:98:E3:C5:00:41:40:3F:14:A2:5D:98:A3:DE:E9:A4
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A5C0BAE32C5389512C81F6F584341
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/V4CbGWiY48UAQUA_FKJdmKPe6aQ.roa
Signing time: Wed 01 Jan 2025 19:49:20 +0000
ROA not before: Wed 01 Jan 2025 19:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1199
IP address blocks: 145.102.136.0/22 maxlen: 22
145.111.0.0/16 maxlen: 16
145.152.0.0/13 maxlen: 13
2001:610:5ea::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:5c:0b:ae:32:c5:38:95:12:c8:1f:6f:58:43:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57809b196898e3c50041403f14a25d98a3dee9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7c:70:62:f4:0e:06:dc:a7:58:90:ae:9d:d6:
1e:66:9c:ba:af:ed:ce:47:f6:83:4d:07:12:30:82:
a5:20:6a:9b:88:ca:76:ed:81:3b:da:78:7d:28:9a:
20:cc:9a:1d:2b:d2:fd:0e:5f:cb:81:38:de:f6:ad:
1c:e6:8e:47:6c:41:a2:8f:83:c6:e6:0a:a6:20:32:
c5:ac:c0:4c:66:bf:19:92:5e:19:5d:c2:07:e5:6c:
58:f6:a3:80:5e:9c:35:40:c2:8b:a9:02:d7:ba:f8:
f1:a5:fd:3f:5c:c7:55:59:05:ad:4b:fb:44:95:33:
b6:94:74:51:11:a3:89:bf:3c:7b:ab:9b:ee:98:d3:
76:06:70:f3:5e:a4:c3:cc:2d:df:9a:a5:d9:53:b6:
1f:02:0e:fe:e0:2d:3a:0c:4f:c2:8d:96:d9:b1:aa:
17:2f:45:4e:b6:a5:a3:e0:fa:f4:15:49:3a:4d:d1:
f7:91:8b:ca:21:9e:18:5d:ac:cd:88:62:88:7b:cd:
b9:eb:58:5b:fb:96:88:69:9b:23:69:fa:9b:27:c6:
6e:85:dc:ce:5d:89:c0:45:5d:dd:e5:9f:81:44:51:
30:56:84:88:b5:2a:55:c8:4c:f2:66:f1:e8:46:95:
28:41:7d:11:09:d8:af:56:27:ff:e9:e1:da:8d:8e:
d4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:80:9B:19:68:98:E3:C5:00:41:40:3F:14:A2:5D:98:A3:DE:E9:A4
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/V4CbGWiY48UAQUA_FKJdmKPe6aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.102.136.0/22
145.111.0.0/16
145.152.0.0/13
IPv6:
2001:610:5ea::/48
Signature Algorithm: sha256WithRSAEncryption
89:24:ff:7d:94:10:6d:af:fc:55:30:6c:e5:a2:18:1d:2c:79:
5f:bb:00:82:b4:e8:59:b9:9f:37:e3:3b:b9:ae:ef:06:0a:2d:
1c:06:2c:6e:b7:87:e0:16:42:f0:82:82:e5:20:6e:e3:b2:5b:
64:1c:14:d6:e8:45:e9:f3:59:8b:e1:62:c4:76:01:22:cd:5e:
11:6e:06:33:d0:43:7e:9f:03:44:df:5a:db:ce:e9:01:65:ec:
45:6b:6f:e6:9a:6d:b0:07:d7:80:f7:f7:5c:ad:a3:66:6a:62:
17:39:76:a2:e7:21:1b:ec:bf:92:13:c8:df:8b:f9:97:53:1b:
55:fb:82:bb:4d:30:81:cc:57:a4:75:68:98:a8:d0:26:d0:b8:
b2:be:e8:96:43:f7:97:f2:e3:26:cd:87:17:82:f3:d8:1b:d6:
f2:0f:2f:21:91:fb:6e:e3:07:a2:5b:2a:06:88:1c:98:08:87:
56:07:ca:2e:0e:2a:65:1a:06:3a:90:41:68:61:4e:cb:6b:53:
4e:71:b2:fb:74:ac:14:ed:ed:df:2c:14:ac:b8:36:9f:f6:48:
f0:b8:76:ae:a6:3d:d2:e0:4a:c9:56:52:41:fa:09:11:cc:7c:
e8:be:b3:64:09:66:b7:9f:52:82:ab:7f:df:77:d6:21:11:d3:
98:83:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:06 2025 by rpki-client